Client authentication configuration in Kafka - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to set the SASL mechanism to use SCRAM-SHA-256.

Kafka

sasl.mechanism=[1]

Drag options to blanks, or click blank then click option'

AOAUTHBEARER

BPLAIN

CGSSAPI

DSCRAM-SHA-256

Attempts:

3 left

💡 Hint

Common Mistakes

Using a mechanism not supported by the Kafka broker.

Misspelling the mechanism name.

The SASL mechanism SCRAM-SHA-256 is used for secure client authentication.

2fill in blank

medium

Complete the code to specify the security protocol for client authentication.

Kafka

security.protocol=[1]

Drag options to blanks, or click blank then click option'

ASSL

BPLAINTEXT

CSASL_SSL

DSASL_PLAINTEXT

Attempts:

3 left

💡 Hint

Common Mistakes

Choosing PLAINTEXT which does not encrypt data.

Using SSL without SASL when authentication is needed.

The SASL_SSL protocol combines SASL authentication with SSL encryption for secure communication.

3fill in blank

hard

Fix the error in the JAAS configuration string for SCRAM authentication.

Kafka

sasl.jaas.config="org.apache.kafka.common.security.scram.ScramLoginModule required [1]=\"secret\" password=\"secret\";"

Drag options to blanks, or click blank then click option'

Auser

Busername

Cclient

Dlogin

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'user' instead of 'username' causes authentication failure.

Incorrect escaping of quotes in the string.

The JAAS config requires the keyword username to specify the username for SCRAM authentication.

4fill in blank

hard

Fill both blanks to configure the client to use SSL truststore and keystore.

Kafka

ssl.truststore.location=[1]
ssl.keystore.location=[2]

Drag options to blanks, or click blank then click option'

A/etc/kafka/client.truststore.jks

B/etc/kafka/client.keystore.jks

C/var/lib/kafka/keystore.jks

D/var/lib/kafka/truststore.jks

Attempts:

3 left

💡 Hint

Common Mistakes

Mixing up truststore and keystore file paths.

Using incorrect file paths that do not exist.

The truststore and keystore locations must point to the correct files for SSL authentication.

5fill in blank

hard

Fill all three blanks to complete the SASL SCRAM client configuration.

Kafka

sasl.mechanism=[1]
sasl.jaas.config="org.apache.kafka.common.security.scram.ScramLoginModule required username=\"[2]\" password=\"[3]\";"

Drag options to blanks, or click blank then click option'

ASCRAM-SHA-512

Balice

Calice_password

DSCRAM-SHA-256

Attempts:

3 left

💡 Hint

Common Mistakes

Using mismatched SASL mechanism and JAAS module.

Incorrectly escaping quotes in the JAAS config string.

This configuration sets the SASL mechanism to SCRAM-SHA-256 with username alice and her password.